Governance · Leeu Workspace
Identity Registry
Frontend identity registry only. Profile data is modeled separately from role and tenant bindings, matching the future RLS posture.
LEEU Mode: DEV_OBSERVE_ONLY11 identities
LEEU Mode DEV_OBSERVE_ONLY. Development is not constrained by live LEEU Execution Governor authority. LEEU Execution Governor controls are being built, simulated, tested, and audited in sandbox. Production external effects remain gated.
Frontend identity registry only. No live auth provider is connected. Roles and tenant bindings are separate records — they are not embedded on the identity row.
LLM Orchestrator Selector
Frontend-only routing intent — no live provider calls
Mock selector — no provider callOrchestrator: Local / Mock
Local / Mock. Local mock lane. Deterministic, offline. No external effects.
liveApiEnabled: false · boundary: none · next: Use for UI/workflow simulation
Identity Registry
Frontend mock · external effects gated
| Identity | Type | Tenant binding | Role binding | Status | Verification | Source | Next action |
|---|---|---|---|---|---|---|---|
Terence Maddison terence@leeu.local | founder_operator | tn_internal_leeu, tn_maddison_homes | role_founder_operator, role_platform_admin | active | verified_local | founder_declared | Hold founder/operator authority — no change |
Hashley hashley@leeu.local | agent | tn_internal_leeu | role_hashley_agent | active | mock_only | agent_registry | No execution authority — proposal-only routing |
Codex Worker codex@service.leeu.local | service_account | tn_internal_leeu | role_codex_worker | active | mock_only | service_account_mock | Manual handoff lane — prompt packets only |
Lovable Builder lovable@service.leeu.local | service_account | tn_internal_leeu | role_lovable_builder | active | mock_only | service_account_mock | UI builder lane — bound by approved contracts |
Construction PM (mock) pm@maddison.local | employee | tn_maddison_homes | role_construction_pm | planned | mock_only | registry_mock | Bind to Construction Ops module when seat policy lands |
Subcontractor (mock) sub@external.local | subcontractor | tn_maddison_homes | role_subcontractor | planned | mock_only | registry_mock | Scoped to assigned project entity only |
Client Viewer (mock) client@external.local | client | tn_maddison_homes | role_client_viewer | planned | mock_only | registry_mock | Read-only project view when client portal lands |
Investor Viewer (mock) investor@external.local | investor | tn_investor_group_demo | role_investor_viewer | planned | mock_only | registry_mock | Investor pack read scope only |
Lender Reviewer (mock) lender@external.local | lender | tn_investor_group_demo | role_lender_reviewer | planned | mock_only | registry_mock | Lender review pack scope only |
AskAllocate operator (legacy) legacy@askallocate.local | unverified | — | — | legacy | stale | legacy_reference | Do not reactivate — legacy reference only |
TS360 / TotalSite360 (overlay) overlay@ts360.local | unverified | tn_ts360_overlay | — | needs_registry | needs_registry | overlay_label | Treat as construction overlay/brand label, not identity |
Hashley summary
What
Terence Maddison · founder_operator
Why it matters
Tenants: tn_internal_leeu, tn_maddison_homes. Roles: role_founder_operator, role_platform_admin.
Current mode
DEV_OBSERVE_ONLY
Lane
Local / Mock
Local/Mock or Live
local/mock
Boundary
proposal_only
Next action
Hold founder/operator authority — no change
Actions are local UI only. No external effects. No provider calls.
External-effect boundary
Channels, proposals, and manifests do not grant execution authority.
External-effect work remains proposal-only until LEEU admission. Production gate is not active.
FilterDEV_OBSERVE_ONLY · mock_only · no_auth_connected